Security Analyst

Summary

Join Tessitura, a non-profit dedicated to supporting arts and cultural organizations, as a Security Analyst. This role is crucial in protecting Tessitura and its member organizations from security threats. You will collaborate with internal teams and member organizations, investigate security incidents, and contribute to compliance programs. The position offers a blend of remote work and on-site options within North America. Compensation ranges from $90,000 to $100,000 annually. The ideal candidate will possess strong communication skills, security expertise, and a collaborative spirit.

Requirements

• At least one year in a direct security role
• At least five years’ experience in systems administration, application administration, or support escalation
• Demonstrated experience working with customers (or Tessitura member organizations) to improve security outcomes
• Strong stakeholder management skills, including as part of project delivery or support escalation
• Demonstrated experience communicating with and influencing colleagues (and service providers) who have their own goals and technical specialties
• An open, curious, and growth-oriented mindset

Responsibilities

• Defend systems against unauthorized access, modification, or destruction
• Conduct security audits and make policy recommendations
• Collaborate with the Support team to investigate and respond to member-facing incidents
• Take part in the Security team on-call incident response rotation
• Document security configuration, practices, and policies
• Train employees in security awareness and security procedures
• Work alongside IT team to assist with security configurations and questions regarding security with Microsoft 365 and Azure
• Monitor, manage, escalate and remediate PCI ASV scans
• Manage and monitor ongoing company PCI DSS compliance program and annual assessment activities

Preferred Qualifications

• Tertiary qualifications in information technology, cyber security, engineering, or a related discipline
• Current certification from vendors or professional associations (such as GIAC, ISACA, or (ISC)2)
• Demonstrated understanding of compliance management, including PA- DSS/SSF, PCI-DSS, or ISO27001
• Demonstrated experience communicating technical concepts to non- technical customers, in a business-to-business context
• Proven ability to work remotely as part of a distributed team

Benefits

Remote work